NetworkManager-strongswan

It provide a plugin for NetworkManager to configure road warrior clients for the most common setups.

NetworkManager uses DBUS to communicate with a plugin loaded by the IKEv2 charon daemon.

The plugin uses a certificate for gateway authentication and supports EAP and RSA authentication for client authentication.
PSK is not supported, as it is considered insecure if the secrets are not strong enough.